This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi there,I want to read the ymsg packets to understand its protocol at different request from the client,so I tried to use wireshark packet sniffer to trace the packets of Yahoo messanger.Wireshark is tracing the tcp,udp,https packets but I find no ymsg packets in the list even though I am using yahoo messanger.Any idea why isnt working for me?

NOTE:I am using a proxy enabled network to connect to the internet.

asked 20 Apr '11, 01:55

kiddo's gravatar image

kiddo
1111
accept rate: 0%

edited 27 Apr '11, 19:25

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k1850

Any idea why isnt working for me?

The short answer: no

The longer answer: you'll need to do some digging to see what's going on.

Wireshark has the capability to dissect the the YMSG protocol.

It looks for TCP packets which have YMSG as the first 4 bytes of the TCP payload.

(Continued in the next comment)

(27 Apr '11, 19:23) Bill Meier ♦♦

The first thing I would do is to search the capture for the string "YMSG": Wireshark ! Edit ! Find packet.

If there are no frames with the string YMSG then there's something fishy about how the capture is being done or with the client. In this case you'd need to describe your [capture] setup:

Are you capturing on the same computer as the YMSG client is being run, etc etc...

If there are packets with the string YMSG (which are not dissected as YMSG) then the question becomes why aren't the packets recognized as YMSG.

So: first: Are there any packets with the string YMSG in your capture ?

(27 Apr '11, 19:24) Bill Meier ♦♦
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×349
×3

question asked: 20 Apr '11, 01:55

question was seen: 2,979 times

last updated: 28 Apr '11, 10:00

p​o​w​e​r​e​d by O​S​Q​A